Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File:                     9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier:          BuLPTCqZgYsqZsX4nwINGelJazQTS8dFB8pCekJHtP8=
Subject key identifier:   6F:01:2E:E1:CF:3D:B1:C1:E9:87:86:0E:E7:B1:4E:B6:CF:6C:C9:59
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       019352AC58F9EB852DAB753E9DF444643FDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number:          138B
Signing time:             Fri 22 Nov 2024 07:00:46 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:46 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:46 +0000
Files and hashes:         1: 2BGtctFKlKO_PyzTWAJGOwUcqSk.roa (hash: ZpDsbf/3qFH5SetXserYtMDaQeFyFnayB04mtTgy+2k=)
                          2: 2V43uJoIqibOwJxaaAuYUaJC-JM.roa (hash: vcsmRegFkYL+pEdtuFzrXOO3F74+lAzJYEHdimJSqsI=)
                          3: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: zKQ3uvdpvm3EfIoXmuiFjhfc0PPjRKcueIWmtfk/aQM=)
                          4: D6spK8KMqFW1JVvYsrv00cHdjQs.roa (hash: JA7Ek9WqiAbk3YLDic5iYbaYlSHMPNL6KGu+XGtrCWI=)
                          5: HXKf_8gBgpM08fP0Bt6uwqRRZ-8.roa (hash: qrK0bQyiju8np0f5gPg8YmbnkcPmGKFrgM/jaoNMZ0U=)
                          6: SQulPcTdxARssYkdPYlb58zFoek.roa (hash: Vgk2PZBCWrPutdoEYdl0zHk8mw48QJbpGEl5LzCd8gI=)
                          7: WicPScCPAMaDjuMlFPEJ1uS0tN4.roa (hash: dzCo3TnlrrYEgNVqzCG4Vq7SIMm2M0ECs9eXI5geUEA=)
                          8: ZlrmUhrtLorVtvD0mIUGxyJfKPg.roa (hash: WOC+lHF1/PAttfhb5B97cqRhsawBNxTxhW72ocGqYaU=)
                          9: aXtZNKdJojYRh6R5U-l_E9BrwZo.roa (hash: jTsJLi8GrgZlhNYq4ncuuY17xGfrG4FlETQsiuXctX4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:58:f9:eb:85:2d:ab:75:3e:9d:f4:44:64:3f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Nov 22 07:00:46 2024 GMT
            Not After : Nov 23 07:00:46 2024 GMT
        Subject: CN=6f012ee1cf3db1c1e987860ee7b14eb6cf6cc959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:a9:bf:32:d1:97:6a:37:3a:f2:4e:37:66:
                    fe:dc:cd:5e:53:e0:ce:d2:3c:0a:a8:03:b4:ec:55:
                    73:2b:9d:d7:ec:9b:02:ef:69:f8:73:b2:95:cf:dc:
                    77:3d:e1:cd:09:f9:98:66:be:22:38:6e:3d:65:91:
                    db:46:6c:24:d9:d2:fb:13:3a:22:68:f9:b2:0d:2d:
                    95:cd:71:40:0c:98:9a:3b:18:9d:3c:12:da:2f:ab:
                    f4:84:4a:80:48:5d:f0:0c:19:61:b5:e2:21:b4:11:
                    ec:6f:3b:f8:cf:1e:96:1b:ba:8c:5e:b3:d4:56:63:
                    96:46:41:ae:cf:88:9b:a9:5f:ad:21:42:98:db:e3:
                    b4:f8:0d:b3:a3:45:b4:de:1f:e4:f4:6e:ee:06:a6:
                    96:9a:2b:83:73:be:1a:24:e0:9a:7f:08:02:c8:06:
                    4f:c9:68:e6:8a:b3:64:04:38:b3:0e:e9:54:c3:78:
                    ce:d7:9e:b3:4d:4a:fd:2a:f1:e2:49:c2:c9:5f:fe:
                    1b:60:47:6d:97:f2:49:18:d3:d4:5f:91:38:b2:cb:
                    6b:30:0f:53:70:ac:d2:78:c3:36:ca:c3:66:34:02:
                    f0:0a:80:8e:f6:12:8c:4b:f1:b4:c4:32:17:7f:23:
                    de:54:e7:18:41:02:6a:d1:9a:9b:d8:48:ed:80:7e:
                    07:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:01:2E:E1:CF:3D:B1:C1:E9:87:86:0E:E7:B1:4E:B6:CF:6C:C9:59
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:be:00:ca:c0:83:6f:cd:2e:05:a5:71:9c:cf:a0:d3:f2:da:
         79:7c:0d:ce:9f:3d:84:76:43:a2:b7:af:07:c2:db:1b:11:9e:
         81:8a:cb:04:7c:60:3f:7d:3c:bc:34:78:b0:dd:cd:06:0b:0a:
         9a:1a:0b:ea:e8:66:b8:25:b4:b9:1b:4a:15:cc:21:ac:cc:ed:
         b2:44:f7:44:b2:d2:cf:5e:bd:f7:1e:95:1b:d4:63:d8:f2:71:
         8e:53:a1:e4:6f:b9:4d:7b:92:96:ed:96:3c:08:3c:2a:86:f3:
         5e:73:1a:40:ec:50:9d:13:9e:f8:f4:b5:d2:28:e8:b9:ce:74:
         07:ac:72:e5:bf:04:65:7d:ab:68:98:a2:5c:90:b8:97:cc:91:
         17:8c:b7:3f:0e:36:74:c7:67:bd:bf:0b:a8:54:18:ac:49:68:
         50:1c:ff:a0:c7:50:c7:eb:16:14:1a:4a:6c:7f:f8:30:ce:bb:
         b3:19:94:bd:68:0f:f7:e2:68:12:39:15:4f:a3:27:d9:37:2b:
         ae:69:8c:b8:c1:6d:2b:69:ff:e0:5f:e8:5f:44:93:6a:bf:c6:
         53:0e:fe:e9:e6:7f:40:38:7e:f6:a6:30:80:0d:ac:6f:38:c2:
         c9:82:0e:fe:3c:be:75:69:dd:cb:7d:4f:d5:c1:bc:b2:b2:a1:
         09:1e:2b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrFj564Utq3U+nfREZD/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz
ODllZDQwHhcNMjQxMTIyMDcwMDQ2WhcNMjQxMTIzMDcwMDQ2WjAzMTEwLwYDVQQD
Eyg2ZjAxMmVlMWNmM2RiMWMxZTk4Nzg2MGVlN2IxNGViNmNmNmNjOTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJOpvzLRl2o3OvJON2b+3M1eU+DO
0jwKqAO07FVzK53X7JsC72n4c7KVz9x3PeHNCfmYZr4iOG49ZZHbRmwk2dL7Ezoi
aPmyDS2VzXFADJiaOxidPBLaL6v0hEqASF3wDBlhteIhtBHsbzv4zx6WG7qMXrPU
VmOWRkGuz4ibqV+tIUKY2+O0+A2zo0W03h/k9G7uBqaWmiuDc74aJOCafwgCyAZP
yWjmirNkBDizDulUw3jO156zTUr9KvHiScLJX/4bYEdtl/JJGNPUX5E4sstrMA9T
cKzSeMM2ysNmNALwCoCO9hKMS/G0xDIXfyPeVOcYQQJq0Zqb2EjtgH4HvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8BLuHPPbHB6YeGDuexTrbPbMlZMB8GA1UdIwQY
MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt
MDgxY2IyYjE3YWI1LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1
LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT74AysCD
b80uBaVxnM+g0/LaeXwNzp89hHZDorevB8LbGxGegYrLBHxgP308vDR4sN3NBgsK
mhoL6uhmuCW0uRtKFcwhrMztskT3RLLSz1699x6VG9Rj2PJxjlOh5G+5TXuSlu2W
PAg8KobzXnMaQOxQnROe+PS10ijouc50B6xy5b8EZX2raJiiXJC4l8yRF4y3Pw42
dMdnvb8LqFQYrEloUBz/oMdQx+sWFBpKbH/4MM67sxmUvWgP9+JoEjkVT6Mn2Tcr
rmmMuMFtK2n/4F/oX0STar/GUw7+6eZ/QDh+9qYwgA2sbzjCyYIO/jy+dWndy31P
1cG8srKhCR4rgA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:50:54 2024 by rpki-client on console-ams.rpki-client.org